After a big "oops", I can no longer su - from a non-privileged account. I added debug to the following in /etc/pam.d/su ... auth required /lib/security/pam_stack.so service=system-auth debug ... which posts the failure message pam_stack: ... returning 7 (Authentication failure) as the last debug message in /var/log/secure /var/log/secure shows that the system password is being properly assigned to PAM_AUTHTOK. All worked before I did a chown /*/* to root.root (thus the "oops" above) on my RH 7.0 system, with Linux 2.2-16-22, and the latest up2date. I restored the original ownership on the /*/* files, but must have missed at least one. I can still log in as root. As far as I can tell, all other pam-related applications are working. Any thoughts? Thanks, Tim